Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File: wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier: EvZzm+l2bIVcAqy8Aoj3ZTP1Vjhsjjb0NvuQoZZzG+Q=
Subject key identifier: FC:6F:13:E5:2C:BF:4B:87:B8:DC:4A:E6:96:B6:0C:21:0A:48:56:EB
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer: /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial: 019A4EF498D365E5950E35F00B628A2F350D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number: 16DF
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: vQVlIdB521sLxxZiC5u3SnpHYxvJ9rJ4dadKg0wvlyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:98:d3:65:e5:95:0e:35:f0:0b:62:8a:2f:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=fc6f13e52cbf4b87b8dc4ae696b60c210a4856eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:97:5c:b8:f5:bb:6f:9f:ad:98:c7:bb:a9:
2a:ea:fa:db:60:3f:1e:7c:e9:29:ee:eb:6c:54:09:
e1:95:28:2c:cb:e7:3f:a6:80:f8:99:23:a2:7b:5e:
30:6b:78:62:2f:d5:62:ea:c6:ae:3b:20:71:65:fc:
76:4a:f3:5b:d8:31:b5:68:c4:f9:6e:1d:a4:4f:d8:
89:df:99:e6:98:89:08:01:d0:8e:1e:3b:99:a9:3a:
f2:cd:75:49:a6:c0:56:2f:06:95:36:aa:62:70:8a:
f4:e8:90:03:4b:da:87:00:60:41:c2:06:41:d8:fb:
e3:b9:4a:2d:ca:49:57:1e:ce:ce:41:c5:93:06:e0:
cf:aa:19:ce:71:2b:75:9c:e4:84:39:36:45:cb:ee:
4b:d2:be:95:e4:10:a8:e9:3d:84:25:ff:d6:a4:39:
78:3e:b8:2c:3a:78:3e:63:2e:2d:cd:1e:f7:b5:4a:
cf:5d:e7:3b:f7:c4:0c:fb:49:6c:cf:eb:a0:48:a0:
c6:da:02:45:1b:b1:91:c7:a0:5d:70:33:39:4f:1d:
dc:e6:d2:77:e8:35:f0:ca:7d:08:77:ff:68:fa:0e:
9c:cf:9d:dd:c0:6e:a4:e5:0d:da:bc:04:51:3b:fe:
4d:78:e8:1c:c6:ad:20:56:91:a6:81:fe:86:bb:e9:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:13:E5:2C:BF:4B:87:B8:DC:4A:E6:96:B6:0C:21:0A:48:56:EB
X509v3 Authority Key Identifier:
keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:25:66:8e:22:5e:14:8c:07:fd:b4:5e:86:55:94:21:6a:cf:
5a:5f:8d:bf:92:8c:9f:c2:f8:e2:35:b9:fc:dd:69:40:79:ae:
59:ed:b6:e8:55:40:d9:3a:d2:ab:83:34:bb:85:c4:a6:34:11:
9f:4d:6e:02:91:9a:b4:75:be:9d:54:e5:c4:35:6f:63:0b:42:
61:d6:2c:6c:af:dc:39:d5:08:92:4b:ce:20:63:ba:c4:f1:f1:
25:54:91:cb:8a:14:b3:7c:12:7e:20:ba:dc:3f:dd:d2:18:3a:
29:e0:57:71:ba:eb:b1:6a:f2:55:26:4c:0f:74:20:4f:f2:66:
a4:3d:64:d1:c6:dc:c9:64:f4:6c:e8:60:5e:5f:67:75:8a:d3:
93:d9:40:e3:70:81:54:03:3f:9c:4a:ce:98:17:1b:47:6d:3c:
f6:46:5c:f1:ed:b1:3a:b6:80:92:14:20:0b:a0:78:98:64:23:
c6:75:ab:db:4d:ba:7e:d6:4f:39:36:ed:16:3f:1f:4f:ee:99:
db:8f:6e:8a:60:bc:6a:f5:8a:1c:ba:51:e8:5f:72:cc:2a:d6:
86:cf:06:33:54:9c:d5:16:54:c0:35:99:66:06:af:f8:72:ce:
c2:59:34:d1:a3:db:ee:c2:88:fd:6b:2d:9e:87:29:72:a5:b1:
d2:06:30:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JjTZeWVDjXwC2KKLzUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjBmN2JiZThkNzYzNjc3NzYxNDhhY2I4YzRjYTM1Zjk2
YmU5NTcwHhcNMjUxMTA0MTMwMDQzWhcNMjUxMTA1MTMwMDQzWjAzMTEwLwYDVQQD
EyhmYzZmMTNlNTJjYmY0Yjg3YjhkYzRhZTY5NmI2MGMyMTBhNDg1NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7CXXLj1u2+frZjHu6kq6vrbYD8e
fOkp7utsVAnhlSgsy+c/poD4mSOie14wa3hiL9Vi6sauOyBxZfx2SvNb2DG1aMT5
bh2kT9iJ35nmmIkIAdCOHjuZqTryzXVJpsBWLwaVNqpicIr06JADS9qHAGBBwgZB
2PvjuUotyklXHs7OQcWTBuDPqhnOcSt1nOSEOTZFy+5L0r6V5BCo6T2EJf/WpDl4
PrgsOng+Yy4tzR73tUrPXec798QM+0lsz+ugSKDG2gJFG7GRx6BdcDM5Tx3c5tJ3
6DXwyn0Id/9o+g6cz53dwG6k5Q3avARRO/5NeOgcxq0gVpGmgf6Gu+nNuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxvE+Usv0uHuNxK5pa2DCEKSFbrMB8GA1UdIwQY
MBaAFMFg97vo12Nnd2FIrLjEyjX5a+lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUt
NjRlMmJkNjE5MzE4LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUtNjRlMmJkNjE5MzE4
LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViVmjiJe
FIwH/bRehlWUIWrPWl+Nv5KMn8L44jW5/N1pQHmuWe226FVA2TrSq4M0u4XEpjQR
n01uApGatHW+nVTlxDVvYwtCYdYsbK/cOdUIkkvOIGO6xPHxJVSRy4oUs3wSfiC6
3D/d0hg6KeBXcbrrsWryVSZMD3QgT/JmpD1k0cbcyWT0bOhgXl9ndYrTk9lA43CB
VAM/nErOmBcbR2089kZc8e2xOraAkhQgC6B4mGQjxnWr2026ftZPOTbtFj8fT+6Z
249uimC8avWKHLpR6F9yzCrWhs8GM1Sc1RZUwDWZZgav+HLOwlk00aPb7sKI/Wst
nocpcqWx0gYwww==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:23 2025 by rpki-client